Regmon-Registry Monitoring

Developed by Mark Russinovich and Bryce Cogswell, this registry utility is truly brilliant.

Regmon monitors the registry and displays all information concerning system-wide registry access. This unique tool is implemented as a combination of a device driver and GUI and is a must for anyone who studies Windows internals or troubleshoots problems caused by an inconsistent registry (Fig. 14.4).

Figure 14.4: Regmon at work

The Regmon utility supports process filtering, allows you to save its output in the ASCII file and even monitors boot-time registry activity.

The authors not only provide it as freeware but also supply technical information on the details of implementation, and even provide the source code.

Supported operating systems: Windows 95/98, Windows NT 4.0, and Windows 2000. It also works well with Windows XP and Windows Server 2003.

Download from: http://www.sysinternals.com.